18 matches found
CVE-2022-43556
Concrete CMS formerly concrete5 below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XSS in the text input field since the result dashboard page output is not sanitized. The Concrete CMS security team has ranked this 4.2 with CVSS v3.1 vector AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N Thanks...
CVE-2025-43556
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-43556
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-43556
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-43556 Animate | Integer Overflow or Wraparound (CWE-190)
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-43556 Animate | Integer Overflow or Wraparound (CWE-190)
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-43556
CVE-2025-43556 concerns Adobe Animate versions 24.0.8, 23.0.11 and earlier. The issue is an Integer Overflow or Wraparound that can lead to arbitrary code execution in the user’s context; exploitation requires the user to open a malicious file. Connected sources corroborate affected versions and ...
Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities
The largest Microsoft Patch Tuesday since July includes two vulnerabilities that have been exploited in the wild and three other critical issues across the company's range of hardware and software offerings. October's monthly security update from Microsoft includes fixes for 117 CVEs, the most in...
CVE-2024-43556
Windows Graphics Component Elevation of Privilege Vulnerability...
CVE-2024-43556 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2024-43556
CVE-2024-43556 is a Windows Graphics Component elevation-of-privilege vulnerability. Public sources confirm it affects the Windows Graphics Component and can yield elevated privileges (base CVSS v3.1 7.8). The issue is listed as a local, privilege-escalation risk; exploitation details are not pro...
CVE-2024-43556
creationtimestamp| type| source ---|---|--- 2024-10-08 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1330/ 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review...
CVE-2023-43556 Buffer Copy Without Checking Size of Input in Hypervisor
Memory corruption in Hypervisor when platform information mentioned is not aligned...
CVE-2023-43556
CVE-2023-43556 describes memory corruption in the Hypervisor when platform information is not aligned. The available connected documents corroborate this vulnerability across multiple sources (NVD, Red Hat CVE entry, CVE list, Vuln Enrichment) with the same description. The materials do not speci...
CVE-2022-43556
creationtimestamp| type| source ---|---|--- 2022-12-06 00:40:27+00:00| seen| https://t.me/cibsecurity/54034 2025-04-24 14:05:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13223...
CVE-2022-43556
Concrete CMS formerly concrete5 below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XSS in the text input field since the result dashboard page output is not sanitized. The Concrete CMS security team has ranked this 4.2 with CVSS v3.1 vector AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N Thanks...
CVE-2021-43556
CVE-2021-43556 affects FATEK WinProladder: versions 3.30_24518 and earlier are vulnerable to a stack-based buffer overflow while processing project files (SPF/TAB/PDW variants, per ZDI advisories). The root cause is improper validation of the length of user-supplied data copied into a stack buffe...
CVE-2021-43556 FATEK Automation WinProladder
FATEK WinProladder Versions 3.3024518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...